@tokenoftrust/storefront-runner 2.2.5 → 2.2.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.2.5",
+  "version": "2.2.7",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/integration/native-amplitude.ts

@@ -51,6 +51,8 @@ export interface AmplitudeHttpEvent {
   event_type: "page_view" | (typeof APPROVED_MARKETING_ACTION_NAMES)[number];
   device_id: typeof ANONYMOUS_DEVICE_ID;
   insert_id: string;
+  /** Occurrence time, epoch milliseconds. */
+  time: number;
   event_properties: GovernedEventProperties & { page_path?: string };
 }
 
@@ -108,6 +110,12 @@ function isSafePagePath(value: unknown): value is string {
     !resemblesManagedAnalyticsPii(value);
 }
 
+/** Epoch ms as hex digits mapped to a-p, so the id carries no digit run the PII heuristic could flag. */
+function opaqueEventTime(epochMs: number): string {
+  return Math.max(0, Math.trunc(epochMs)).toString(16)
+    .replace(/[0-9a-f]/g, (digit) => String.fromCharCode(97 + parseInt(digit, 16)));
+}
+
 /**
  * Reduce a broker event to the complete Amplitude allowlist. Returning null is
  * fail-closed for unknown events, invalid/extra data, consent loss, environment
@@ -136,9 +144,16 @@ export function mapCommerceEventToAmplitude(
   const governed = buildGovernedEventProperties(environmentResult.value, tenantPublicId);
   if (!governed) return null;
 
+  // The logical id is shared by every visitor and page of a release, and Amplitude drops
+  // any later event with the same device_id + insert_id for 7 days while still answering
+  // 200. The occurrence time makes each occurrence distinct; a re-delivery of the same
+  // occurrence carries the same time and so still deduplicates.
+  const time = Date.parse(event.time);
+  if (!Number.isFinite(time)) return null;
   const base = {
     device_id: ANONYMOUS_DEVICE_ID,
-    insert_id: eventDedupeKey(event),
+    insert_id: `${eventDedupeKey(event)}-${opaqueEventTime(time)}`,
+    time,
   };
   if (event.type === "storefront.action.activated.v1") {
     const name = event.data["name"];